nicovideo.jp 77 packages

Last scanned on Oct 27 at 07:07 PM
lodash 4.17.16VulnerableOutdated
Lodash modular utilities.
License
MIT
Footprint
6 KB
Vulnerabilities
Command Injection in lodash
Affected versions >=0 <4.17.21
Regular Expression Denial of Service (ReDoS) in lodash
Affected versions >=0 <4.17.21
Prototype Pollution in lodash
Affected versions >=3.7.0 <4.17.19
Matched Modules
Version distribution in production
3 846
4.17.16
946
4.17.21
337
4.17.20
322
4.17.15
302
4.17.19
301
4.17.13
axios 0.16.2VulnerableOutdated
Promise based HTTP client for the browser and node.js
es5-ext 0.10.24 - 0.10.49VulnerableOutdated
ECMAScript extensions and shims
tslib 1.6.0 - 2.4.0Outdated
Runtime library for TypeScript helper functions
uuid 8.3.0 - 9.0.0Outdated
RFC4122 (v1, v4, and v5) UUIDs
react-is 16.3.0 - 16.13.1Outdated
Brand checking of React Elements.
inherits 2.0.4
Browser-friendly inheritance fully compatible with standard node.js inherits()
qs 6.11.0Outdated
A querystring parser that supports nesting and arrays, with a depth limit
@babel/runtime 7.18.2 - 7.20.0Outdated
babel's modular runtime helpers
+1
hzoo
existentialism
nicolo-ribaudo
get-intrinsic 1.1.3Outdated
Get and robustly cache all JS language-level intrinsics at first require time
function-bind 1.1.0 - 1.1.1Outdated
Implementation of Function.prototype.bind
call-bind 1.0.2Outdated
Robustly `.call.bind()` a function
object-inspect 1.12.2Outdated
string representations of objects in node and the browser
has-symbols 1.0.2 - 1.0.3
Determine if the JS environment has Symbol support. Supports spec, or shams.
side-channel 1.0.4Outdated
Store information about any JS value in a side channel. Uses WeakMap if available.
has-property-descriptors 1.0.0Outdated
Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.
object-assign 3.0.0Outdated
ES2015 `Object.assign()` ponyfill
es-abstract 1.18.7 - 1.20.4Outdated
ECMAScript spec abstract operations.
define-properties 1.1.4Outdated
Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.
is-callable 1.2.7
Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.
has-tostringtag 1.0.0Outdated
Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.
events 3.0.0 - 3.3.0
Node's event emitter for all engines.
is-buffer 1.1.4 - 1.1.6Outdated
Determine if an object is a Buffer
which-typed-array 1.1.6 - 1.1.8Outdated
Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.
object-keys 1.1.0 - 1.1.1
An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim
core-js 3.23.3 - 3.26.0Outdated
Standard library
is-typed-array 1.1.7 - 1.1.9Outdated
Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.
available-typed-arrays 1.0.5Outdated
Returns an array of Typed Array names that are available in the current environment
util 0.12.0 - 0.12.5
Node.js's util module for all engines
for-each 0.3.3
A better forEach
ljharb
raynos
extend 2.0.2Outdated
Port of jQuery.extend for node.js and the browser
has 1.0.1 - 1.0.3Outdated
Object.prototype.hasOwnProperty.call shortcut
tarruda
tarruda
scheduler 0.15.0 - 0.23.0
Cooperative scheduler for the browser environment.
prop-types 15.8.0 - 15.8.1
Runtime type checking for React props and similar objects.
is-arguments 1.1.1
Is this an arguments object? It's a harder question than you think.
react 0.12.0 - 17.0.2Outdated
React is a JavaScript library for building user interfaces.
lodash.debounce 4.0.8
The lodash method `_.debounce` exported as a module.
is-generator-function 1.0.10
Determine if a function is a native generator function.
url 0.11.0Outdated
The core `url` packaged standalone for use with Browserify.
date-fns 1.30.1Outdated
Modern JavaScript date utility library
kossnocorp
kossnocorp
object-is 1.1.0 - 1.1.5Outdated
ES2015-compliant shim for Object.is - differentiates between -0 and +0
hoist-non-react-statics 3.3.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
querystring 0.2.0 - 0.2.1
Node's querystring module for all engines.
classnames 2.3.2Outdated
A simple utility for conditionally joining classNames together
assert 2.0.0Outdated
The assert module from Node.js, for the browser.
dom-helpers 5.0.1 - 5.2.1
tiny modular DOM lib for ie9+
core-js-pure 3.22.6 - 3.26.0Outdated
Standard library
dateformat 1.0.9 - 2.2.0Outdated
A node.js package for Steven Levithan's excellent dateFormat() function.
+3
felixge
ctavan
jonschlinkert
lodash-es 4.17.21
Lodash exported as ES modules.
react-fast-compare 3.1.0 - 3.2.0Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
querystring-es3 0.2.1
Node's querystring module for all engines. (ES3 compat fork)
shallowequal 1.0.1 - 1.1.0
Like lodash isEqualWith but for shallow equal.
@babel/runtime-corejs3 7.18.0 - 7.19.6Outdated
babel's modular runtime helpers with core-js@3 polyfilling
+1
hzoo
existentialism
nicolo-ribaudo
history 5.3.0
Manage session history with JavaScript
d3-shape 1.0.2 - 3.1.0Outdated
Graphical primitives for visualization, such as lines and areas.
is-nan 1.3.1 - 1.3.2
ES2015-compliant shim for Number.isNaN - the global isNaN returns false positives.
p-is-promise 3.0.0 - 4.0.0
Check if something is a promise
react-hook-form 7.0.0 - 7.21.2Outdated
Performant, flexible and extensible forms library for React Hooks
attr-accept 2.2.2
JavaScript implementation of the "accept" attribute for HTML5 <input type="file">
@angular/platform-browser 2.0.0 - 2.4.10Outdated
Angular - library for using Angular in a web browser
angular
google-wombot
es6-object-assign 1.0.0 - 1.1.0
ECMAScript 2015 (ES6) Object.assign polyfill and ponyfill
dnd-core 9.3.2 - 10.0.2Outdated
Drag and drop sans the GUI
+2
jordangens
gaearon
darthtrevino
react-side-effect 2.1.0 - 2.1.2
Create components whose prop changes map to a global side effect
react-helmet 6.0.0 - 6.1.0
A document head manager for React
react-dnd 15.0.0 - 16.0.1
Drag and Drop for React
+2
jordangens
gaearon
darthtrevino
react-intersection-observer 8.33.0 - 9.0.0Outdated
Monitor if a component is inside the viewport, using IntersectionObserver API
react-dnd-html5-backend 7.4.4 - 11.1.3Outdated
HTML5 backend for React DnD
+2
jordangens
gaearon
darthtrevino
antd 4.22.0 - 4.23.6Outdated
An enterprise-class UI design language and React components implementation
use-debounce 8.0.0 - 8.0.4Outdated
Debounce hook for react
mapbox-gl 0.27.0 - 0.33.1Outdated
A WebGL interactive maps library
+25
mbx-npm-ci-production
mbx-npm-ci-staging
mbx-npm-advanced-actions-production
body-scroll-lock 3.1.4 - 3.1.5Outdated
Enables body scroll locking (for iOS Mobile and Tablet, Android, desktop Safari/Chrome/Firefox) without breaking scrolling of a target element (eg. modal/lightbox/flyouts/nav-menus)
@chakra-ui/theme 2.1.0 - 2.1.3Outdated
The default theme for chakra components
vee-validate 2.0.0 - 2.0.9Outdated
Painless forms for Vue.js
react-share 4.0.0 - 4.4.0Outdated
Social media share buttons and share counts for React.
bootstrap-vue 1.0.0 - 2.15.0Outdated
With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens
react-string-replace 0.4.0 - 0.4.4Outdated
String#replace for React components
@splitsoftware/splitio 10.4.0 - 10.17.3Outdated
Split SDK